登录查看更多内容

How can you create a successful network segmentation strategy?

由人工智能和领英社区提供技术支持

Network segmentation is the practice of dividing a network into smaller subnetworks, or segments, based on different criteria, such as function, security, performance, or location. Network segmentation can offer many benefits, such as improving network efficiency, enhancing security, reducing costs, and simplifying management. However, creating a successful network segmentation strategy requires careful planning, design, implementation, and maintenance. In this article, you will learn some key steps and best practices to help you achieve your network segmentation goals.

此文章中的业界达人

由社区从 6 条内容中精选。了解更多

1 Identify your objectives and requirements

The first step in creating a network segmentation strategy is to define your objectives and requirements. What are the main reasons and benefits for segmenting your network? What are the current and future needs and challenges of your network? How do you measure the success of your network segmentation? These questions will help you establish a clear vision and scope for your project, as well as identify the stakeholders, resources, and constraints involved.

添加您的观点

Richard Stiennon

On a mission to provide actionable insights and foster informed decision-making with complete data on the cybersecurity industry.
举报内容
Wow, this guide would be great in 2003. The world has moved on from datacenter thinking and segmenting by function, role, etc. Skip this whole planning/process step and jump right to modern micro-segmentation. Every resource is on a segment of one. In other words a packet makes zero stops on its way from source to destination. There is no such thing as a compromised host or a man in the middle with micro-segmentation. This is the zero-trust way. This is the basis of SASE.

已翻译

赞
Ben Yarbrough
举报内容
Digital asset/system “safe deposit lockbox”…. What do you think of that expression as a physical world parallel of zero trust network access?

已翻译

赞
Nadeem I.

--
举报内容
1. Identify Needs: Define data sensitivity, security goals, traffic patterns. 2. Segment Wisely: Group devices based on trust, risk, and function. 3. Implement Controls: Use firewalls, access controls, and encryption. 4. Monitor & Adapt: Regularly assess and adjust for changes in threats and needs. Least privilege, grant access only when necessary, not just possible.

已翻译

赞

2 Assess your current network architecture and performance

The next step is to evaluate your existing network architecture and performance. You need to understand how your network is structured, configured, and operated, as well as how it handles traffic, bandwidth, latency, and security. You can use various tools and methods, such as network mapping, monitoring, analysis, and testing, to collect and review data about your network. This will help you identify the current and potential issues, risks, and gaps in your network, as well as the opportunities and benefits for improvement.

添加您的观点

Arpit Nigam

DevSecOps, System Design, SRE | CNCF Contributor(Falco) | MLOps | Ex- Mercedes Benz USA, Ericsson, Apollo 247 | Azure 8x AWS | K8s ?? Docker ??
举报内容
Evaluating your network architecture and performance is indeed a crucial step. Utilizing tools like network mapping, monitoring, analysis, and testing allows you to comprehensively assess your network. This data-driven approach aids in identifying existing issues, potential risks, and areas for improvement.

已翻译

赞

3 Design your network segmentation model and policies

The third step is to design your network segmentation model and policies. You need to decide how to divide your network into segments, based on the criteria that best suit your objectives and requirements. For example, you can segment your network by function, such as separating servers, clients, printers, and IoT devices. You can also segment your network by security, such as isolating sensitive or critical data and applications from unauthorized or untrusted access. You can also segment your network by performance, such as optimizing traffic flow and quality of service for different applications and users. You also need to define your network segmentation policies, which are the rules and guidelines that govern how the segments communicate and interact with each other and with external networks. For example, you can use firewalls, access control lists, VPNs, and encryption to control and secure the network traffic between segments.

添加您的观点

Trent Fierro
举报内容
Wow. ACLs, VLANs & a lot of VPN. Let’s stay old school! A layer 3 Approach for campus zero trust security may fair better today. You use your firewall more efficiently and get better isolation without having to run around doing as much configuration.

已翻译

赞

4 Implement and test your network segmentation strategy

The fourth step is to implement and test your network segmentation strategy. You need to deploy the necessary hardware, software, and configuration changes to create and manage your network segments, according to your design and policies. You also need to test and verify the functionality, performance, and security of your network segments, as well as the interoperability and compatibility with other networks and systems. You can use various tools and methods, such as simulation, emulation, pilot testing, and penetration testing, to validate and refine your network segmentation strategy.

添加您的观点

5 Monitor and maintain your network segmentation strategy

The final step is to monitor and maintain your network segmentation strategy. You need to continuously observe and measure the performance, security, and efficiency of your network segments, as well as the satisfaction and feedback of your network users and stakeholders. You also need to regularly update and optimize your network segmentation policies and configurations, as well as troubleshoot and resolve any issues or problems that may arise. You can use various tools and methods, such as network management, auditing, logging, and reporting, to support and improve your network segmentation strategy.

添加您的观点

Frank Antico
举报内容
All of this is good but you need a solid identity management strategy for users, devices and data to fit into any segmentation strategy. This is foundational

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Computer Networking

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you create a successful network segmentation strategy?

1

2

3

4

5

6

1 Identify your objectives and requirements

2 Assess your current network architecture and performance

3 Design your network segmentation model and policies

4 Implement and test your network segmentation strategy

5 Monitor and maintain your network segmentation strategy

6 Here’s what else to consider

Computer Networking

给文章评分

感谢您的反馈

更多Computer Networking相关文章

更多相关阅读内容

How can you create a successful network segmentation strategy?

1

2

3

4

5

6

1 Identify your objectives and requirements

2 Assess your current network architecture and performance

3 Design your network segmentation model and policies

4 Implement and test your network segmentation strategy

5 Monitor and maintain your network segmentation strategy

6 Here’s what else to consider

Computer Networking

给文章评分

感谢您的反馈

查看其他技能